Once we logged into windows with AD user, Once if we opened portal homepage without prompting authentication user should logging into EP

[former_member200909]

Dear Experts,

We have configured LDAP between EP and AD server. Once if we do any changes in user from AD server side automatically reflects in EP. But our requirement is once if we logged into windows (local desktop) with AD user, if we click the EP portal link it should automatically go to home page without asking user authentication.

Please anyone knows the solution kindly share with me.

Regards,

Sampath Kumar S.

[LutzR]

Hi Sampath Kumar S.,

my impression is that you are looking for Kerberos/SPNego configuration for your system according to http://help.sap.com/saphelp_nw75/helpdata/en/4a/3fc8279c09044fe10000000a421937/frameset.htm.

Did I understand you correctly?

Regards,

Lutz

[Rajeshkumar7]

Dear Lutz,

Yes, I am looking for Kerberos/SAPNego configuration. In our landscape portal is using ADS as a database. Can I get any step by step documents for this.

Thanks & Regards,

Sampath Kumar S

[kaus19d]

Hi Sampath Kumar,

Just to make sure that we are on the same page, could you check whether you were actually looking for the below materials,

eXo Platform Documentation

How To Configure Browser-based SSO with Kerberos/SPNEGO and Oracle WebLogic Server

Configuring Active Directory Integration Using Kerberos

14.8. Configure Kerberos or Microsoft Active Directory Desktop SSO for Web Applications

How to configure supported browsers for Kerberos and NTLM

Hope this helps your cause.

Thanks,

Kaushik

[LutzR]

Hi,

try this one as a starting point:

Regards,

Lutz

[Rajeshkumar7]

Dear lutz,

as per your link HowTo: New Implementation of SPNego in Freshly Installed SAP NW EP7.3x – it’s as easy as abc i  had followed to configure spnego. but we re facing an error, we collec ted the trace file by starting diagonistics please kindly find the same in below.

11:04:58:585

Path

Guest

SAP_AFScheduler.Worker

...tion.programmatic.getLoggedInUser()

Entering method

11:04:58:595

Debug

Guest

SAP_AFScheduler.Worker

...tication.programmatic.getAuthscheme

Trying to get subject from security session.

11:04:58:596

Info

Guest

SAP_AFScheduler.Worker

...tication.programmatic.getAuthscheme

No authentication template attached to session/subject

11:04:58:596

Path

Guest

SAP_AFScheduler.Worker

...(Principal, IUser, Subject, String)

Entering method

11:04:58:596

Debug

Guest

SAP_AFScheduler.Worker

...thentication.programmatic.getTicket

Does not have private credentials

11:04:58:597

Debug

Guest

SAP_AFScheduler.Worker

...(Principal, IUser, Subject, String)

Ticket string is not available.

11:04:58:597

Debug

Guest

SAP_AFScheduler.Worker

...(Principal, IUser, Subject, String)

Does not have any public credentials

11:04:58:597

Path

Guest

SAP_AFScheduler.Worker

...tion.programmatic.getLoggedInUser()

Exiting method with Guest

please kindly let me know if you help me for this issue.

regards,

sampath kumar s

[former_member200909]

Dear Lutz,

I am facing below issue

1:04:58:585

Path

Guest

SAP_AFScheduler.Worker

...tion.programmatic.getLoggedInUser()

Entering method

11:04:58:595

Debug

Guest

SAP_AFScheduler.Worker

...tication.programmatic.getAuthscheme

Trying to get subject from security session.

11:04:58:596

Info

Guest

SAP_AFScheduler.Worker

...tication.programmatic.getAuthscheme

No authentication template attached to session/subject

11:04:58:596

Path

Guest

SAP_AFScheduler.Worker

...(Principal, IUser, Subject, String)

Entering method

11:04:58:596

Debug

Guest

SAP_AFScheduler.Worker

...thentication.programmatic.getTicket

Does not have private credentials

11:04:58:597

Debug

Guest

SAP_AFScheduler.Worker

...(Principal, IUser, Subject, String)

Ticket string is not available.

11:04:58:597

Debug

Guest

SAP_AFScheduler.Worker

...(Principal, IUser, Subject, String)

Does not have any public credentials

11:04:58:597

Path

Guest

SAP_AFScheduler.Worker

...tion.programmatic.getLoggedInUser()

Exiting method with Guest

Can you help me.

Regards,

Sampath Kumar S.

[Former Member]

Hi Sampath,

Please check if login with anonymous user is an option for your requirement.

Using Anonymous Logon to Access the Portal - Configuring the Portal for Initial Use - SAP Library

Best regards,

Etay

[kaus19d]

You may add the required access-rights in AD for the required AD User Ids, then it would not ask.

[former_member200909]

Dear Kaushik Debnath,

Please kindly let me know what access-rights we need to provide at AD server side.

Regards,

Sampath Kumar S.

[kaus19d]

Hi ,

You should give that job to your OS-Support team. For your OS support team, provided the below links,

Enable users to access Enterprise Portal [AX 2012]

https://technet.microsoft.com/en-us/library/dd362140(v=ax.50).aspx

For you I would like to recommend the below,

Portal Permissions - Portal - SAP Library

User Data Administration - Help | SAP Support Portal

https://www.google.co.in/url?sa=t&rct=j&q=&esrc=s&source=web&cd=6&cad=rja&uact=8&ved=0ahUKEwiZs4fRjK...

Clean-cut Demonstration available at,

Creating Roles in SAP EP Portal and assigned them to Portal Users - Business Intelligence (BusinessO...

Thanks,

Kaushik

[kaus19d]

Hi Sampath Kumar,

Also would like to update that in IE, the following settings are used, in the users system,

Also in AD, 1st test using a User with the rights adding that User to the following Groups. Like for my Windows system, I have to provide the below rights at least,

Cert Publishers, Authenticated Users, Pre-Windows 2000 Compatible Access, Windows Authorization Access Group

Thanks,

Kaushik